set skip on interface

in the display of the rules in pf with the regular:

pfctl -sr

it is not a rule.

I guess one could argue that:

set block-policy option

is not a rule either, but it does show up however:

Example 1:
In pf.conf
<snip>
set block-policy return
block all
<snip>

pfctl -sr
<snip>
block return all
<snip>

Example 2:
In pf.conf
<snip>
set block-policy drop
block all
<snip>

pfctl -sr
<snip>
block drop all
<snip>

This set option does show up here.

OK, it can be argue that it might be a rule as well, but it is enter as set option in the same section as set skip.

Daniel

Reply via email to